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AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application. 

Listing of Claims : 

Claims 1-10. (Cancelled) 

1 1 . (Currently Amended) A method for generating a public key certificate of an end 
entity by a registration authority and an issuing authority in a public key infrastructure, 
comprising the steps of: 

generating, by the registration authority, a signature to contents to be registered with a 
[[the]] public key certificate^;]] and gen e rating, by th e registration authority , and a certificate 
issuing request including both the contents signed by the registration authority and a signature to 
the contents signed by the registration authority signatur e; 

sending the certificate issuing request from the registration authority to the issuing 
authority; and 

generating, in response to the certificate issuing request by the issuing authority, a the 
public key certificate including the contents signed by the registration authority, the signature to 
the contents signed by the registration authority signatur e, issuing contents to be issued by the 
issuing authority, and an issuing authority signature to the contents signed by the registration 
authority, the signature to the contents signed by the registration authority signatur e and the 
issuing contents issued by the issuing authority ; and 
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sending the public key certificate from the issuing authority to the registration authority 
for being registered within the registration authority . 

12. (Previously Presented) A method as recited in claim 1 1 , wherein 

the contents signed by the registration authority is a predetermined identifier to specify 
information to be certified by the pubic key certificate of the end entity. 

13. (Previously Presented) A method as recited in claim 1 1, wherein 

the contents signed by the registration authority is a hash value calculated by applying a 
hash function to information to be certified by the public key certificate of the end entity. 

14. (Previously Presented) A method for as recited in claim 1 1, further comprising the 
steps of: 

verifying, by a verifying party, the issuing authority signature with the contents signed by 
the issuing authority; and 

verifying, by the verifying party, the registration authority signature with the contents 
signed by the registration authority included in the public key certificate. 

15. (Previously Presented) A method as recited in claim 12, further comprising the steps 

of: 

acquiring, by a verifying party, information signed by the registration authority according 
to the identifier in the public key certificate; 

calculating, by the verifying party, a hash value of the acquired information; 
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decoding, by the verifying party, the registration authority signature included in the 
public key certificate, by using a public key of the registration authority; and 

checking by the verifying party, whether the hash value is identical to the decoded value. 

16. (Previously Presented) A method as recited in claim 13, further comprising the steps 

of: 

calculating, by a verifying party, a hash value of the information signed by the 
registration authority in the public key certificate; 

decoding, by the verifying party, the registration authority signature included in the 
public key certificate, by using a public key of the registration authority; and 

checking by the verifying party, whether the hash value is identical to the decoded value. 

17. (Previously Presented) A method as recited in claim 14, further comprising the steps 

of: 

constructing and verifying, by the verifying party, a path from the certificate authority 
trusted by the verifying party, up to the public key certificate; 

verifying, by the verifying party, the registration authority signature described in the 
public key certificate using the public key of the registration authority; and 

constructing and verifying, by the verifying party, a path from the certificate authority 
trusted by the verifying party up to the public key certificate of the registration authority. 

18. (Previously Presented) A method as recited in claim 17; wherein 
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the verifying party obtains the public key certificate of the registration authority from a 
public key certificate database of the issuing authority according to the registration authority 
name described on the public key certificate. 

19. (Previously Presented) A method as recited in claim 17; wherein 

the verifying party obtains the public key certificate of the registration authority 
described in an extended region of the public key certificate to be verified. 

20. (Previously Presented) As method as recited in claim 11, further comprising the 
steps of: 

sending, by the registration authority, a certificate invalidation request to the issuing 

authority of the public key certificate of the registration authority; 

receiving, by the issuing authority, the certificate invalidation request; and 
invalidating, by the issuing authority, the public key certificate of the registration 

authority. 

21. (New) A certificate authority to be used in a public key infrastructure including a 
plurality of end entities comprising: 

(A) a registration authority for generating: 

(A-l) a signature to contents to be registered with a public key certificate of each 
of the plurality of end entities; and 
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(A-2) a certificate issuing request including both the contents signed by the 
registration authority and a signature to the contents signed by the 
registration authority; and 
(B) an issuing authority (12) connected to the registration authority through a network 
for generating, in response to the certificate issuing request, a public key certificate including: 

(B-l) the contents signed by the registration authority; 

(B-2) the signature to the contents signed by the registration authority; 

(B-3) issuing contents to be issued by the issuing authority; and 

(B-4) an issuing authority signature to the contents signed by the registration 

authority, the signature to the contents signed by the registration authority 
and the issuing contents issued by the issuing authority, the public key 
certificate being sent to the registration authority and registered within the 
registration authority. 



